This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91AF207/ACB0685EC22811EF86E3484FC4F9AE02/LSI7Vu1NF6gXj-n8Y-OAGpO1odM.mft
File: LSI7Vu1NF6gXj-n8Y-OAGpO1odM.mft (raw, json)
Hash identifier: /H5iQb7lTEZfXD1AStTrP2N1szFGPy4g6V2bhNbmBac=
Subject key identifier: 4A:6A:79:45:D4:7C:1F:58:C0:AB:86:D8:91:A9:77:A4:6D:BC:8C:98
Authority key identifier: 2D:22:3B:56:ED:4D:17:A8:17:8F:E9:FC:63:E3:80:1A:93:B5:A1:D3
Certificate issuer: /CN=A91AF207/serialNumber=2D223B56ED4D17A8178FE9FC63E3801A93B5A1D3
Certificate serial: B0
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/LSI7Vu1NF6gXj-n8Y-OAGpO1odM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91AF207/ACB0685EC22811EF86E3484FC4F9AE02/LSI7Vu1NF6gXj-n8Y-OAGpO1odM.mft
Manifest number: AF
Signing time: Wed 03 Dec 2025 04:26:00 +0000
Manifest this update: Wed 03 Dec 2025 04:25:59 +0000
Manifest next update: Wed 10 Dec 2025 04:25:59 +0000
Files and hashes: 1: LSI7Vu1NF6gXj-n8Y-OAGpO1odM.crl (hash: +F3lMihVxB2NA38VX+GOUzGes/CRW9he8spcVjF56MI=)
2: DFAC15B0C22C11EFB3AEE476C4F9AE02.roa (hash: kwAnzY8sy28GuHuTAHp4dfauwLru447J5nFlWPhA168=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91AF207/ACB0685EC22811EF86E3484FC4F9AE02/LSI7Vu1NF6gXj-n8Y-OAGpO1odM.crl
rsync://rpki.apnic.net/member_repository/A91AF207/ACB0685EC22811EF86E3484FC4F9AE02/LSI7Vu1NF6gXj-n8Y-OAGpO1odM.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/LSI7Vu1NF6gXj-n8Y-OAGpO1odM.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 10 Dec 2025 04:25:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 176 (0xb0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91AF207, serialNumber=2D223B56ED4D17A8178FE9FC63E3801A93B5A1D3
Validity
Not Before: Dec 3 04:25:59 2025 GMT
Not After : Dec 10 04:25:59 2025 GMT
Subject: CN=692fbbd8-5166
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:59:2c:ae:24:2a:65:7a:5f:a1:ed:21:a0:13:
7d:b4:a3:93:60:f1:cb:08:08:3c:1c:52:6e:b3:42:
5f:aa:1d:95:e8:39:2a:ae:07:5c:ea:40:15:e7:bb:
83:0b:68:dc:70:66:55:40:48:5b:1c:70:dc:b4:b0:
26:90:48:df:f4:08:43:8a:62:80:d3:b5:4a:b6:62:
27:0d:d2:38:4d:93:10:0e:26:dc:21:6e:11:b7:c5:
dd:06:1a:81:22:fc:f0:e2:19:c1:6d:01:c8:f2:cd:
9a:03:f2:98:66:5b:49:2e:f3:71:b9:d8:4d:f7:b8:
68:1a:97:8c:cd:0f:55:91:45:b8:05:3d:ce:cd:53:
00:b1:6b:48:c6:1a:4c:f5:f1:03:eb:aa:ee:1d:f0:
f8:1b:0f:d4:bf:45:0f:cd:7f:cf:5e:44:2d:2c:89:
c2:b6:41:ab:7d:ff:de:ee:6a:db:77:0c:3a:d3:b7:
79:bb:62:86:18:73:24:9d:2f:25:97:c5:f1:db:d7:
67:ed:08:8a:11:50:5d:3a:84:d2:78:d6:2b:4e:35:
35:a9:77:3a:ad:6d:2f:f4:16:a5:e0:0d:fa:a3:b9:
53:5c:9f:bf:10:0a:86:5a:1c:a6:19:24:8e:eb:8c:
1a:78:93:45:96:52:1e:04:03:7b:85:2b:df:10:05:
11:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:6A:79:45:D4:7C:1F:58:C0:AB:86:D8:91:A9:77:A4:6D:BC:8C:98
X509v3 Authority Key Identifier:
keyid:2D:22:3B:56:ED:4D:17:A8:17:8F:E9:FC:63:E3:80:1A:93:B5:A1:D3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91AF207/ACB0685EC22811EF86E3484FC4F9AE02/LSI7Vu1NF6gXj-n8Y-OAGpO1odM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/LSI7Vu1NF6gXj-n8Y-OAGpO1odM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AF207/ACB0685EC22811EF86E3484FC4F9AE02/LSI7Vu1NF6gXj-n8Y-OAGpO1odM.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
2b:f2:da:1e:aa:52:35:f4:b1:d1:e5:63:53:42:8e:84:26:a4:
b3:be:b5:ab:7f:0a:b7:0b:28:d9:1c:51:9b:55:64:e0:4e:91:
24:81:5d:69:5a:84:48:5b:a5:4a:39:48:9f:c7:69:3c:dd:09:
d7:91:16:3e:40:1a:f8:14:ef:e5:4d:ee:11:31:73:93:ef:65:
5d:dd:e9:0b:55:47:c9:ce:7d:5c:f7:cd:f5:61:35:06:ba:5a:
46:84:1c:7d:6a:10:5c:b7:cc:d7:66:38:78:5a:a9:33:af:8b:
6d:cf:63:88:f4:98:30:aa:a8:d5:ba:8b:4f:51:31:63:f1:27:
6c:55:b8:b6:66:7f:1d:74:bd:f6:40:3a:46:ab:36:e3:6b:2f:
0f:82:bc:cd:3f:fe:e5:a8:cf:49:90:a6:ff:0d:96:61:52:a7:
5f:d2:6e:b6:44:29:63:39:f9:02:03:9b:61:d0:e7:ed:23:76:
52:bc:98:d3:80:55:b6:f4:a2:c6:c7:7d:89:73:d0:bb:51:43:
53:b2:c8:9e:3e:78:65:f0:b0:2c:f9:f8:db:c4:0a:72:1c:a8:
5e:18:96:18:a5:70:20:e9:11:27:1d:06:d8:5b:50:8c:88:1f:
b5:55:b6:b3:d2:7d:ef:4e:26:11:ed:38:30:da:85:2e:93:0b:
1f:08:32:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 3 13:58:04 2025 by rpki-client